Privacy policy

Last updated: October 2026

DRAFT: This privacy policy is a draft and must be reviewed by Veronika before the website goes live.

Who is responsible?

Veronika Flø (Creative Flø), Oslo, is the data controller for the personal data described here. If you have questions about privacy, contact me at creativefloe@gmail.com.

The contact form

When you send an enquiry, I receive your name, your email address and what you write in the form: preferred date, type of session, number of people, approximate location and your description.

I only use this information to reply to you and to plan a possible session. The legal basis is that you ask for it yourself and that it is necessary to enter into an agreement (GDPR Article 6(1)(b)).

The form is sent through a service called Formspree, which forwards the message to my email. Formspree may store the data on servers in the USA. The transfer is protected by the EU Standard Contractual Clauses.

Photo sessions and gallery delivery

When we have an agreement, I process contact details, payment information and the photos from the session in order to deliver what we agreed.

Photos are delivered in a private online gallery protected by a password or private link. The gallery is hosted by an external provider, and I keep it available for an agreed period before it is deleted.

I do not use photos of you or your children in my portfolio, on the website or on Instagram without your consent. You can withdraw your consent at any time.

How long is data kept?

Enquiries that do not lead to a booking are deleted no later than 12 months after our last contact.

Accounting records, such as invoices, are kept as long as the Norwegian Bookkeeping Act requires, currently up to five years.

I keep the photos for up to two years after delivery so I can help if you lose them. Just let me know if you would like them deleted sooner.

Cookies and analytics

This website does not use cookies and has no tracking. The fonts are hosted on the website itself, so no data is sent to Google or others when you visit.

The company hosting the website may record technical data such as IP addresses in server logs to keep the service secure and stable.

Your rights

You have the right to access the data I hold about you and to have it corrected or deleted. You can also ask for restricted processing, object to processing and receive your data in a portable format.

Send an email to creativefloe@gmail.com and I will reply within 30 days.

If you believe I am processing your data unlawfully, you can complain to the Norwegian Data Protection Authority, Datatilsynet.

Book a session